Details of VAR-202112-2206

ID

VAR-202112-2206

CVE

CVE-2021-45515

TITLE

plural NETGEAR Vulnerabilities in devices

Trust: 0.8

sources: JVNDB: JVNDB-2021-017112

DESCRIPTION

Certain NETGEAR devices are affected by denial of service. This affects EX7500 before 1.0.0.72, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, RBRE960 before 6.0.3.68, RBSE960 before 6.0.3.68, RBR750 before 3.2.17.12, RBR850 before 3.2.17.12, RBS750 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, and RBK852 before 3.2.17.12. plural NETGEAR There is an unspecified vulnerability in the device.Service operation interruption (DoS) It may be in a state. This affects EX7500 prior to 1.0.0.72, RBS40V prior to 2.6.1.4, RBW30 prior to 2.6.1.4, RBRE960 prior to 6.0.3.68, RBSE960 prior to 6.0.3.68, RBR750 prior to 3.2.17.12, RBR850 prior to 3.2.17.12, RBS750 prior to 3.2.17.12, RBS850 prior to 3.2.17.12, RBK752 prior to 3.2.17.12, and RBK852 prior to 3.2.17.12

Trust: 1.71

sources: NVD: CVE-2021-45515 // JVNDB: JVNDB-2021-017112 // VULMON: CVE-2021-45515

AFFECTED PRODUCTS

vendor:	netgear	model:	rbr750	scope:	lt	version:	3.2.17.12	Trust: 1.0
vendor:	netgear	model:	rbs40v	scope:	lt	version:	2.6.1.4	Trust: 1.0
vendor:	netgear	model:	rbw30	scope:	lt	version:	2.6.1.4	Trust: 1.0
vendor:	netgear	model:	rbs850	scope:	lt	version:	3.2.17.12	Trust: 1.0
vendor:	netgear	model:	rbse960	scope:	lt	version:	6.0.3.68	Trust: 1.0
vendor:	netgear	model:	rbk752	scope:	lt	version:	3.2.17.12	Trust: 1.0
vendor:	netgear	model:	rbre960	scope:	lt	version:	6.0.3.68	Trust: 1.0
vendor:	netgear	model:	rbs750	scope:	lt	version:	3.2.17.12	Trust: 1.0
vendor:	netgear	model:	rbk852	scope:	lt	version:	3.2.17.12	Trust: 1.0
vendor:	netgear	model:	rbke963	scope:	lt	version:	6.0.3.68	Trust: 1.0
vendor:	netgear	model:	rbr850	scope:	lt	version:	3.2.17.12	Trust: 1.0
vendor:	netgear	model:	ex7500	scope:	lt	version:	1.0.0.72	Trust: 1.0
vendor:	ネットギア	model:	ex7500	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbke963	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbr750	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbse960	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbre960	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbs750	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbw30	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbr850	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbs40v	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbs850	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2021-017112 // NVD: CVE-2021-45515

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2021-45515
value:	MEDIUM
Trust: 1.0
cve@mitre.org:	CVE-2021-45515
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2021-45515
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-202112-2329
value:	MEDIUM
Trust: 0.6
VULMON:	CVE-2021-45515
value:	LOW
Trust: 0.1

nvd@nist.gov:	CVE-2021-45515
severity:	LOW
baseScore:	3.3
vectorString:	AV:A/AC:L/AU:N/C:N/I:N/A:P
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	6.5
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9

nvd@nist.gov:	CVE-2021-45515
baseSeverity:	MEDIUM
baseScore:	6.5
vectorString:	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	ADJACENT
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	3.6
version:	3.1
Trust: 2.0
OTHER:	JVNDB-2021-017112
baseSeverity:	MEDIUM
baseScore:	6.5
vectorString:	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	ADJACENT NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULMON: CVE-2021-45515 // JVNDB: JVNDB-2021-017112 // CNNVD: CNNVD-202112-2329 // NVD: CVE-2021-45515 // NVD: CVE-2021-45515

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	Lack of information (CWE-noinfo) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2021-017112 // NVD: CVE-2021-45515

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-202112-2329

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202112-2329

PATCH

title:	Security Advisory for Denial of Service on Some Extenders and WiFi Systems, PSV-2020-0286	url:	https://kb.netgear.com/000064484/Security-Advisory-for-Denial-of-Service-on-Some-Extenders-and-WiFi-Systems-PSV-2020-0286	Trust: 0.8
title:	Netgear RBR750 and NETGEAR Security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=177074	Trust: 0.6

sources: JVNDB: JVNDB-2021-017112 // CNNVD: CNNVD-202112-2329

EXTERNAL IDS

db:	NVD	id:	CVE-2021-45515	Trust: 3.3
db:	JVNDB	id:	JVNDB-2021-017112	Trust: 0.8
db:	CNNVD	id:	CNNVD-202112-2329	Trust: 0.6
db:	VULMON	id:	CVE-2021-45515	Trust: 0.1

sources: VULMON: CVE-2021-45515 // JVNDB: JVNDB-2021-017112 // CNNVD: CNNVD-202112-2329 // NVD: CVE-2021-45515

REFERENCES

url:	https://kb.netgear.com/000064484/security-advisory-for-denial-of-service-on-some-extenders-and-wifi-systems-psv-2020-0286	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2021-45515	Trust: 1.4
url:	https://cwe.mitre.org/data/definitions/.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: VULMON: CVE-2021-45515 // JVNDB: JVNDB-2021-017112 // CNNVD: CNNVD-202112-2329 // NVD: CVE-2021-45515

SOURCES

db:	VULMON	id:	CVE-2021-45515
db:	JVNDB	id:	JVNDB-2021-017112
db:	CNNVD	id:	CNNVD-202112-2329
db:	NVD	id:	CVE-2021-45515

LAST UPDATE DATE

2024-11-23T22:32:58.577000+00:00

SOURCES UPDATE DATE

db:	VULMON	id:	CVE-2021-45515	date:	2022-01-05T00:00:00
db:	JVNDB	id:	JVNDB-2021-017112	date:	2023-01-04T06:53:00
db:	CNNVD	id:	CNNVD-202112-2329	date:	2022-01-06T00:00:00
db:	NVD	id:	CVE-2021-45515	date:	2024-11-21T06:32:23.680

SOURCES RELEASE DATE

db:	VULMON	id:	CVE-2021-45515	date:	2021-12-26T00:00:00
db:	JVNDB	id:	JVNDB-2021-017112	date:	2023-01-04T00:00:00
db:	CNNVD	id:	CNNVD-202112-2329	date:	2021-12-26T00:00:00
db:	NVD	id:	CVE-2021-45515	date:	2021-12-26T01:15:13.627